Skip to main content
POST
Create Authorization Request

Body

application/json
clientId
enum<string>
required
Available options:
korve-cli,
korve-mcp
redirectUri
string<uri>
required
Maximum string length: 2048
state
string
required
Required string length: 32 - 256
codeChallenge
string
required

Base64url SHA-256 digest of the client's PKCE verifier.

Pattern: ^[A-Za-z0-9_-]{43}$
codeChallengeMethod
enum<string>
required
Available options:
S256
audience
enum<string>
required

The first-party client surface that may present the resulting token.

Available options:
cli,
mcp
scopes
string[]
required

Exact public API operation ids the grant may call.

Required array length: 1 - 256 elements
Maximum string length: 128
Pattern: ^[A-Za-z][A-Za-z0-9]*\.[A-Za-z][A-Za-z0-9]*$
requestedRole
enum<string>
required

Maximum organization role the grant may exercise. Owner grants do not exist.

Available options:
member,
admin

Response

Authorization request created; open authorizationUrl in a browser.

requestId
string<uuid>
required
authorizationUrl
string<uri>
required
expiresAt
string<date-time>
required